An administrator is replacing a wireless router. The configuration of the old wireless router was not documented before it stopped functioning. The equipment connecting to the wireless network uses older legacy equipment that was manufactured prior to the release of the 802.11i standard.
Which of the following configuration options should the administrator select for the new wireless router?
A.
WPA+CCMP
B.
WPA2+CCMP
C.
WPA+TKIP
D.
WPA2+TKIP
I think B is correct. Refer to:
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/67134-wpa2-config.html
0
7
Prior to 802.11i… which means prior to WPA-2 so in this case anything with WPA2 in the answer should be an automatic no… the older legacy equipment cannot connect with WPA2
4
0
soooo…. If WPA2 is a no-go, then the answer would have to be “C: WPA+TKIP” because CCMP was developed to replace TKIP and be used with WPA2 correct?
5
0
no, it’s D. Skip the first few sentences and just read the last sentence. It’s asking what should be setup for a brand new router. Of the those four choices – which is the most secure?
4
3
The most secure choice will not work with the equipment that needs to connect with it.
2
0
I’m doubling down on C: because of this:
“For the time the 802.11i wireless security standard was in development, WPA was used as a temporary security enhancement for WEP. One year before WEP was officially abandoned, WPA was formally adopted. Most modern WPA applications use a preshared key (PSK), most often referred to as WPA Personal, and the Temporal Key Integrity Protocol or TKIP (/tiːˈkɪp/) for encryption.
1
0
Very good description:
https://www.professormesser.com/security-plus/sy0-401/tkip-and-ccmp/
0
0
I am going with C.
Answers with WPA2 should be rejected since the equipment in use will not connect to it. It does not matter if it is the most secure if it doesn’t do the job.
WPA-CCMP is not supported by many devices. Using this we would risk devices not being able to connect.
The only thing that is sure to work is C.
0
0
C
it can not be D coz WPA2 = 802.11i and it says they connect “legacy equipment that was manufactured prior to the release of the 802.11i standard”
Devices that dont support wpa2 cant support CCMP either
4
0
It is D.
WPA2-PSK (TKIP): This uses the modern WPA2 standard with older TKIP encryption. This isn’t secure, and is only a good idea if you have older devices that can’t connect to a WPA2-PSK (AES) network.
https://www.howtogeek.com/204697/wi-fi-security-should-you-use-wpa2-aes-wpa2-tkip-or-both/
4
1
“While WPA2 is supposed to use AES for optimal security, it can also use TKIP where backward compatibility with legacy devices is needed. In such a state, devices that support WPA2 will connect with WPA2 and devices that support WPA will connect with WPA. So “WPA2” doesn’t always mean WPA2-AES. However, on devices without a visible “TKIP” or “AES” option, WPA2 is generally synonymous with WPA2-AES.”
1
0
The key in here is the use of the 802.11i standard.
– 802.11i is a standard for wireless local area networks (WLANs) that provides improved encryption for networks that use the popular 802.11a, 802.11b (which includes Wi-Fi) and 802.11g standards.
-The 802.11i standard requires new encryption key protocols, known as “Temporal Key Integrity Protocol” (TKIP) and Advanced Encryption Standard (AES). The 802.11i standard was officially ratified by the IEEE in June of 2004, and thereby became part of the 802.11 family of wireless network specifications.
In short, the fact that the standard in use is “802.11i”, this demands by sheer necessity the use of TKIP (Or AES, which is not listed)
This eliminates “A.WPA+CCMP” and “B.WPA2+CCMP” from the onset, leaving a toss-up between C and D
Yet, C uses WPA and D uses WPA2. Why use a deprecated, unsecure WPA protocol when we can use a more secure WPA2 protocol?
WPA uses TKIP (Temporal Key Integrity Protocol) while WPA2 is capable of using BOTH TKIP or the more advanced AES algorithm.
So the best answer by far is indeed : “D.WPA2+TKIP” . An even better answer would have been: “WPA2+AES” since in essence, TKIP is deprecated and no longer considered secure, much like WEP encryption. For optimal security, choose WPA2, the latest encryption standard, with AES encryption.
2
1
D is correct.
Isn’t CCMP just AES? CCMP cannot be used because of legacy environment. WPA2-TKIP will also with old equipment.
1
1
Check this…
https://www.howtogeek.com/204697/wi-fi-security-should-you-use-wpa2-aes-wpa2-tkip-or-both/
0
0